Security audit

MBA Thesis Advisor

Security checks for vulnerabilities and agentic risk

Overview

This skill is a coherent Chinese MBA thesis writing and formatting helper, with no evidence of hidden execution, exfiltration, persistence, or destructive behavior.

Install this if you want Chinese-language MBA thesis advice, especially for LaTeX/thuthesis workflows. Avoid relying on it as-is for other institutions, languages, or degree types without explicitly telling the agent your school requirements and formatting rules. Be aware it may inspect local thesis source files and handle signature-image formatting when you ask for those tasks.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (7)

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 88% confidence
Finding: The skill description hard-codes Chinese MBA thesis norms, Tsinghua-style excellence targets, thuthesis preferences, and China-specific formatting expectations without making them conditional on user choice. If invoked for non-Chinese, non-MBA, or institutionally different thesis contexts, the skill can silently steer users toward the wrong academic standards and document requirements, producing misleading or noncompliant outputs.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The trigger list contains broad, natural phrases such as “帮我改论文” and “MBA论文” that are likely to appear in ordinary conversation, increasing the chance of accidental invocation outside the user's intent to use this specific skill. Unintended activation can cause the agent to apply this skill’s strong thesis-specific guidance, file-reading workflow, and China-specific assumptions in contexts where they are inappropriate, leading to prompt hijacking of the user experience or unauthorized handling of user content.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: This markdown file is written entirely in Chinese and explicitly instructs that these five questions must be asked before any rewriting work begins. That creates a de facto language requirement for skill use without documenting user choice or a justified locale-specific constraint.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: This markdown file is entirely written as a Chinese-only style guide and presents its instructions as the default format, with no indication that users may choose another language or locale. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale restriction is explicitly justified.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The trigger phrases are broad enough to match many ordinary academic-assistance requests, such as generic requests to revise a thesis or help with formatting. This can cause the skill to activate outside its narrow intended scope, increasing the chance of inappropriate interception of user queries and unintended handling of sensitive academic content.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 83% confidence
Finding: The description is entirely Chinese and strongly frames the skill around Chinese MBA thesis norms without stating whether language selection is optional. If the platform serves broader audiences, this may lead to unexpected language behavior or mismatched activation for users who did not opt into Chinese-language assistance, reducing transparency and user control.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 88% confidence
Finding: This markdown file contains natural-language instructions exclusively in Chinese, starting from the title and introduction, with no indication that users may choose another language. Under the policy rule for language or locale constraints, forcing a single language without opt-in can be a violation unless it is clearly documented as region-specific and justified.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.